Solved

Active Directory Password Reset and Account Unlock

Posted on 2010-09-14
3
905 Views
Last Modified: 2012-05-10
Hi All,

I am trying to understand in details as to how "Active Directory Password Reset and Account Unlock" works. Do we require PDC emulator to change the password and unlock the accounts. If the users are not able to reach PDC will they be able to change their passwords and unlock accounts. Will they face any issue.

As per my understanding the password is changed locally on the Domain Controller and PDC gets the prefrential update of the same and if the PDC is down the users will be able to change the password but I am not very sure how unlock works.

Please let me know if anybody has any document related to this.

Thanks
Sukhwinder
0
Comment
Question by:Neo_78
3 Comments
 
LVL 14

Accepted Solution

by:
Schnell Solutions earned 84 total points
ID: 33675059

The users do not need the PDC in order to Change or Unlock the passwordo. It is true that the PDC can help the process of replication in scenarios where you have multiple DCs because these changes sync in Urgent Mode with the server

If the PDC is offline, the user will be able to change or unluck his/her password and when the PDC come back online it will sync the Domain partition with the new changes


0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 83 total points
ID: 33675082
Since Windows 2000 there is really no such thing as a PDC and BDC anmore, though there is still a PDC Emulator largely for legacy purposes. All copies of active directory are updateable, the client needs to contact only one DC - any one, and the changes are replicated automatically to all the others.
0
 
LVL 17

Assisted Solution

by:Tony Massa
Tony Massa earned 83 total points
ID: 33675774
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now